Information processing system, information processing method, and program

Abstract

Provided is an information processing system (10) comprising: a generation unit (11) that, when authentication based on first biological information recorded in a personal confirmation medium and second biological information of a user acquired by a sensor of a user terminal has been successful, generates specific information based on the information recorded in the personal confirmation medium; and a control unit (12) that causes a distributed ledger system to record the specific information in association with account information of the user in a specific service.

Description

Information processing system, information processing method, and computer-readable medium

[0001] The present disclosure relates to an information processing system, an information processing method, and a computer-readable medium.

[0002] Patent Document 1 discloses a technology for performing authentication based on a video captured by a camera and a facial image included in identification information read from an IC chip embedded in a driver's license.

[0003] Japanese Patent Application Laid-Open No. 2020-064541

[0004] However, the technology described in Patent Document 1 has a problem in that it is sometimes inconvenient because, for example, it is necessary to read a facial image from a driver's license every time authentication is performed.

[0005] In view of the above-mentioned problems, an object of the present disclosure is to provide a technology that improves the convenience of authentication.

[0006] In a first aspect of the present disclosure, there is provided an information processing system having: a generation unit that, when authentication based on first biometric information recorded on a personal identification medium and second biometric information of a user acquired by a sensor of a user terminal is successful, generates specific information based on the information recorded on the personal identification medium; and a control unit that records the specific information in a distributed ledger system in association with account information of the user for a specific service.

[0007] In addition, a second aspect of the present disclosure provides an information processing method, in which, when authentication based on first biometric information recorded on an identity verification medium and second biometric information of a user acquired by a sensor of a user terminal is successful, specific information is generated based on the information recorded on the identity verification medium, and the specific information is associated with account information of the user for a specific service and recorded in a distributed ledger system.

[0008] In addition, a third aspect of the present disclosure provides a non-transitory computer-readable medium storing a program that causes a computer to execute a process to generate specific information based on the information recorded on the identity verification medium, associate the specific information with account information of the user for a specific service, and record the specific information in a distributed ledger system, if authentication based on first biometric information recorded on the identity verification medium and second biometric information of the user acquired by a sensor of the user terminal is successful.

[0009] According to one aspect, it is possible to improve the convenience of authentication.

[0010] 1 is a diagram showing an example of the configuration of an information processing system according to an embodiment; FIG. 2 is a diagram showing an example of the system configuration of a communication system according to an embodiment; FIG. 3 is a diagram showing an example of the hardware configuration of a user terminal and a server according to an embodiment; FIG. 4 is a flowchart showing an example of processing of a communication system according to an embodiment; FIG. 5 is a diagram showing an example of a user DB according to an embodiment; FIG. 6 is a diagram showing an example of a display screen of a virtual space according to an embodiment; FIG. 7 is a diagram showing an example of a display screen of a virtual space according to an embodiment;

[0011] The principles of the present disclosure will be described with reference to some exemplary embodiments. It should be understood that these embodiments are set forth for illustrative purposes only, to aid those skilled in the art in understanding and practicing the present disclosure, without implying any limitation on the scope of the present disclosure. The disclosure described herein can be implemented in various ways other than those described below. In the following description and claims, unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which the present disclosure belongs. Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

[0012] (First Embodiment) <Configuration> The configuration of an information processing system 10 according to the embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of the configuration of the information processing system 10 according to the embodiment. The information processing system 10 has a generation unit 11 and a control unit 12. These units may be realized by cooperation between one or more programs installed in the information processing system 10 and hardware such as a processor 101 and a memory 102 of the information processing system 10.

[0013] If authentication based on the first biometric information recorded on the identity verification medium and the user's second biometric information acquired by a sensor on the user terminal is successful, the generation unit 11 generates specific information based on the information recorded on the identity verification medium.

[0014] The control unit 12 associates the specific information with the user's account information for a specific service and records the specific information in the distributed ledger system.

[0015] (Embodiment 2) Next, with reference to Fig. 2, a system configuration of a communication system 1 according to an embodiment will be described. <System Configuration> Fig. 2 is a diagram showing an example of the system configuration of a communication system 1 according to an embodiment. In the example of Fig. 2, the communication system 1 has a user terminal 20, a server 30, a server 31, and a blockchain system (an example of a "distributed ledger system") 40. Note that at least one of the user terminal 20, the server 30, and the server 31 is an example of an information processing system 10. Note that the numbers of user terminals 20, the servers 30, the servers 31, and the blockchain system 40 are not limited to the example of Fig. 2.

[0016] In the example of Figure 2, the user terminal 20, the server 30, the server 31, and the blockchain system 40 are connected so that they can communicate with each other via a network N.

[0017] Examples of the network N include the Internet, a mobile communication system, a wireless local area network (LAN), a LAN, a bus, etc. Examples of the mobile communication system include a fifth generation mobile communication system (5G), a sixth generation mobile communication system (6G, Beyond 5G), a fourth generation mobile communication system (4G), a third generation mobile communication system (3G), etc.

[0018] The user terminal 20 may be, for example, a device used by a user, such as a smartphone, a tablet terminal, or a personal computer. An application (program) provided by, for example, a business operator that operates the server 30 may be installed on the user terminal 20.

[0019] The servers 30 and 31 may be, for example, on-premise or cloud servers (computers). The server 30 provides an authentication (identification) service based on an identity verification card or the like issued by a public institution. The server 30 may also provide users with, for example, a metaverse service, which is an online virtual space. The server 31 provides services (for example, administrative services) from other businesses that are affiliated with the business that operates the server 30. The server 31 may be, for example, a server operated by a public institution such as a government agency, and that provides users with various services, such as administrative services.

[0020] The blockchain system 40 is a system in which each node records a blockchain (an example of a "distributed ledger"), which is a list of records (blocks) linked using cryptographic technology. Note that the blockchain system 40 may be a public blockchain system in which each node that records the list is not authenticated, or a private blockchain system in which each node that records the list is authenticated.

[0021] The blockchain system 40 records a list of records (blocks) including a token ID and a certified person token (CPT, Certified Person Token; an example of "specific information"). The token ID is information indicating the location on the blockchain where the certified person token is recorded (address, block in the list). The token ID may also be an identifier (transaction ID, transaction hash) of the transaction that records the certified person token in the blockchain system 40. The authenticated person token may include, for example, a hash value of each piece of information recorded on a personal identification medium. The authenticated person token may be generated, for example, by at least one of the user terminal 20 and the server 30.

[0022] <Hardware Configuration> Fig. 3 is a diagram showing an example of the hardware configuration of the user terminal 20, server 30, and server 31 according to the embodiment. The following description will be given using the user terminal 20 as an example, but the hardware configuration of the servers 30 and 31 may also be the same as that of the user terminal 20. In the example of Fig. 3, the computer 100 of the user terminal 20 includes a processor 101, a memory 102, and a communication interface 103. These components may be connected via a bus or the like. The memory 102 stores at least a part of the program 104. The communication interface 103 includes an interface required for communication with other network elements.

[0023] When the program 104 is executed by the processor 101, memory 102, and other components in cooperation with each other, the computer 100 performs at least some of the processing of the embodiments of the present disclosure. The memory 102 may be of any type. As a non-limiting example, the memory 102 may be a non-transitory computer-readable storage medium. The memory 102 may also be implemented using any suitable data storage technology, such as semiconductor-based memory devices, magnetic memory devices and systems, optical memory devices and systems, fixed memory, and removable memory. Although only one memory 102 is shown in the computer 100, several physically different memory modules may be present in the computer 100. The processor 101 may be of any type. The processor 101 may include one or more of a general-purpose computer, a special-purpose computer, a microprocessor, a digital signal processor (DSP), and, as a non-limiting example, a processor based on a multi-core processor architecture. The computer 100 may have multiple processors, such as application-specific integrated circuit chips that are time-slaved to a clock that synchronizes the main processor.

[0024] Embodiments of the present disclosure may be implemented in hardware or special purpose circuits, software, logic, or any combination thereof. Some aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor, or other computing device.

[0025] The present disclosure also provides at least one computer program product tangibly stored on a non-transitory computer-readable storage medium. The computer program product includes computer-executable instructions, such as instructions included in program modules, that execute on a target real or virtual processor or device to perform the processes or methods of the present disclosure. Program modules include routines, programs, libraries, objects, classes, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The functionality of the program modules may be combined or divided among program modules as desired in various embodiments. The machine-executable instructions of the program modules may be executed in local or distributed devices. In a distributed device, the program modules may be located in both local and remote storage media.

[0026] The program code for executing the methods of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus. When the program code is executed by the processor or controller, the functions / acts in the flowcharts and / or implementing block diagrams are performed. The program code may be executed entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine, or entirely on a remote machine or server.

[0027] The program can be stored and supplied to a computer using various types of non-transitory computer-readable media. Non-transitory computer-readable media include various types of tangible recording media. Examples of non-transitory computer-readable media include magnetic recording media, magneto-optical recording media, optical disk media, and semiconductor memory. Magnetic recording media include, for example, flexible disks, magnetic tapes, and hard disk drives. Magneto-optical recording media include, for example, magneto-optical disks. Optical disk media include, for example, Blu-ray discs, CD (Compact Disc)-ROM (Read Only Memory), CD-R (Recordable), and CD-RW (Rewritable). Semiconductor memory includes, for example, solid-state drives, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, and RAM (Random Access Memory). The program may also be supplied to a computer by various types of temporary computer-readable media. Examples of temporary computer-readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire or an optical fiber, or via a wireless communication path.

[0028] <Processing> Next, an example of processing of the communication system 1 according to the embodiment will be described with reference to Fig. 4 to Fig. 6. Fig. 4 is a sequence diagram showing an example of processing of the communication system 1 according to the embodiment. Fig. 5 is a diagram showing an example of a user DB 501 according to the embodiment. Fig. 6 is a diagram showing an example of data included in one record 601 included in the blockchain according to the embodiment.

[0029] The following process may be executed, for example, when a user creates an authenticated account for a specific service. Note that communication between the user terminal 20 and the server 30 may be encrypted by an application installed on the user terminal 20.

[0030] In step S1, the user terminal 20 acquires information such as biometric information (hereinafter also referred to as "first biometric information") recorded on a personal identification medium in response to an operation by the user. Here, the personal identification medium may be, for example, an IC (Integrated Circuit) chip provided on a personal identification card issued by a public institution. Examples of personal identification cards issued by a public institution may include, for example, an individual number card containing a personal identification number (My Number), a driver's license indicating permission to drive a mobile vehicle, a residence card indicating permission to reside in Japan, or a passport. The user terminal 20 may acquire information from the personal identification medium via near field communication (NFC), for example, using a personal identification number (PIN) input by the user.

[0031] The first biometric information may include, for example, at least one of a facial image, a finger vein pattern, iris information, and fingerprint information. The user terminal 20 may also acquire a number identifying the user, such as a personal identification number, a driver's license number, a residence card number, or a passport number, from the personal identification medium. The user terminal 20 may also acquire personal information of the user, such as a name, address, date of birth, and gender, from the personal identification medium.

[0032] Next, the user terminal 20 acquires biometric information of the user (hereinafter also referred to as "second biometric information" as appropriate) using a sensor of the user terminal 20 (step S2). Here, the user terminal 20 may acquire, for example, an image (still image or video) of the user's face captured by a camera of the user terminal 20. The user terminal 20 may also acquire a finger vein pattern, for example, using a dedicated sensor connected to the user terminal 20 or a camera built into the user terminal 20. The user terminal 20 may also acquire iris information based on an image captured by the camera of the user terminal 20. The user terminal 20 may also acquire fingerprint information, for example, using a fingerprint sensor of the user terminal 20.

[0033] Next, the user terminal 20 authenticates the user (verifies the user's identity) based on the first biometric information recorded on the identity verification medium and the user's second biometric information acquired by a sensor on the user terminal (step S3). Here, the user terminal 20 may, for example, calculate the similarity between the first biometric information and the second biometric information using AI (artificial intelligence) or the like, and determine that the authentication is successful if the calculated similarity is equal to or greater than a threshold. The user terminal 20 may also determine that the authentication is successful if one-time password (OTP) authentication is also successful. In this case, the server 30 may provide the user with a one-time password by email addressed to the user's email address or via SMS (Short Message Service), etc.

[0034] Next, the user terminal 20 records at least one of the first biometric information and the second biometric information in the storage device of the user terminal 20 (step S4). Note that the next time the user uses a specific service (e.g., when logging in), the user terminal 20 may authenticate the user based on at least one of the first biometric information and the second biometric information recorded in the user terminal 20 and the user's third biometric information acquired by a sensor of the user terminal 20. This, for example, can reduce the effort required to read data from an identity verification medium the next time the user is authenticated for a specific service. Furthermore, compared to a configuration in which biometric information is stored on the server 30, etc., the risk of the user's biometric information being leaked can be reduced. Note that the user terminal 20 may encrypt and record the first biometric information and the second biometric information using a specific encryption method. Furthermore, the user terminal 20 may also use biometric authentication (e.g., iris authentication or hearable authentication) that is highly compatible with VR (Virtual Reality) goggles. In this case, the user terminal 20 may, for example, acquire an iris image and audio data for hearable authentication using VR goggles and record them in a storage device of the user terminal 20. Then, the next time the user uses a specific service, the VR goggles may acquire an iris image and audio data for hearable authentication, and the user may be authenticated based on the acquired information and the recorded information.

[0035] Next, the user terminal 20 transmits a request to create an authenticated account to the server 30 (step S5). The request to create an authenticated account includes information indicating that identity verification has been successful and a user ID, which is identification information for the user's account in a specific service. The user ID may be, for example, the user's email address, etc., specified by the user. The request to create an authenticated account may also include information obtained from the identity verification medium that identifies the user, such as a number (e.g., personal identification number), name, address, date of birth, and gender.

[0036] Next, the server 30 determines whether the user already has another authenticated account (a duplicate account) (step S6). Here, the server 30 may determine that the user already has another authenticated account if a hash value based on a number identifying the user (e.g., a personal identification number) or the like has already been registered in an authenticated person token of the blockchain system 40. This reduces the risk of leakage of the user's personal information compared to a configuration in which the server 30 or the like stores the user's personal information and determines whether a duplicate account exists. If the user already has another authenticated account, the server 30 may return a notification to that effect to the user terminal 20 and not execute the processes from step S7 onwards.

[0037] In addition, if the number identifying the user included in the received request to create an authenticated account is already registered in user DB 501, server 30 may determine that the user already has another authenticated account.

[0038] 5, the user DB 501 stores user information, token IDs, and service information in association with user IDs. The user information may include information such as a number for identifying a user (e.g., a personal number), name, address, date of birth, and gender. The service information is user data used in various services provided by the server 30. The service information may include, for example, information about the user's avatar.

[0039] If the user does not have any other authenticated accounts, the server 30 records the authenticated person token in the blockchain system 40 (step S7). As a result, a record 601 including the token ID and the authenticated person token is added to the blockchain, as shown in FIG. 6.

[0040] The server 30 may record the authenticated person token in a blockchain system 40 designated by the user from among multiple blockchain systems. This allows the user to use the blockchain system of their choice, for example, when transaction fees, security levels, etc. differ for each blockchain system.

[0041] Next, the server 30 creates an authenticated account for the user (step S8). Here, the server 30 may record a record of a combination of the user ID, user information, and token ID in the user DB 501. As a result, the authenticated person token and the user's account information are recorded in association with each other.

[0042] (Example of using authenticated person token in other services) The server 31 may use the authenticated person token recorded in the blockchain system 40. This allows a user to verify their identity in a specific service provided by the server 30, and then verify their identity in other services (for example, administrative services, financial services, settlement services, securities services, insurance services) without having to perform an operation to read data from a personal identification medium.

[0043] In this case, for example, when an authentication service request is initiated by a service representative, the server 31 may transmit a biometric authentication request for verifying the identity of the user to the user terminal 20. Furthermore, when the server 31 receives information such as the name, address, date of birth, and gender input by the user from the user terminal 20, the server 31 may transmit a biometric authentication request for verifying the identity of the user to the user terminal 20.

[0044] The user terminal 20 may then perform authentication based on the first biometric information recorded in the user terminal 20 and the second biometric information acquired by a camera or the like of the user terminal 20. The user terminal 20 may then return the authentication result and the user ID to the server 31.

[0045] The server 31 may then obtain a token ID associated with the user ID from the user DB 501. The server 31 may then calculate hash values ​​for the information input by the user, such as the name, address, date of birth, and gender. The server 31 may then determine that the identity verification has been successful if each calculated hash value matches a hash value included in an authenticated person token associated with the token ID and recorded in the blockchain system 40. This can reduce the risk of account hijacking for government services, for example.

[0046] The server 31 may also determine whether the user already has another authenticated account (a duplicate account). In this case, the server 31 determines the user's nationality based on information acquired from the user DB 501. If the user has a foreign nationality, the server 31 may, for example, inquire with a server of the Ministry of Foreign Affairs or the like to acquire information identifying the user. If the user does not have a foreign nationality, the server 31 may determine whether the user already has another authenticated account based on a number (e.g., a personal identification number) that identifies the user and that is managed by the server 31. In this case, the server 31 may, for example, record information indicating whether or not the user has an authenticated account for each personal identification number. Note that the server 31 may synchronize with the blockchain system 40, record each user's authenticated person token in an internal database, etc., and make a determination based on the information recorded in the database, etc., instead of the blockchain system 40.

[0047] (Example of using data related to personal identification in a virtual space) Next, an example of using data related to personal identification in a virtual space will be described with reference to Fig. 7. Fig. 7 is a diagram showing an example of a display screen of a virtual space according to an embodiment.

[0048] The server 30 may display information indicating that the user has been authenticated based on the identity verification medium in a virtual space (e.g., the metaverse) for a specific service, in association with the user's avatar. This allows, for example, a person in charge of dealing with the user in the metaverse (e.g., a sales representative or a public institution representative) to understand that the user has been identified. In this case, the server 30 may determine whether an authenticated person token corresponding to the user is recorded in the blockchain system 40, and if recorded, may display a specific display object in association with the user's avatar.

[0049] In the example of Figure 7, a display screen 701 that displays a virtual space for a specific service on a display screen displays a display object 712 that corresponds to a user's avatar 711 and indicates that the user has been authenticated based on an identity verification medium.

[0050] Furthermore, the server 30 may display information according to the attributes of the blockchain system 40 in association with the user's avatar in the virtual space of a specific service. The attributes of the blockchain system 40 may include, for example, whether the blockchain system 40 is public or private. The attributes of the blockchain system 40 may also include, for example, information about the organization (group) that operates the blockchain system 40.

[0051] As a result, for example, a person in charge of a user on the metaverse can understand the attributes of the blockchain system 40 that records that the user is a verified user. Therefore, for example, when transaction fees, security levels, etc. differ for each blockchain system, the person in charge can estimate the trustworthiness of the user based on the blockchain system 40 that the user is using. In the example of Figure 7, a display object 713 indicating the organization that operates the blockchain system 40 is displayed in association with the user's avatar 711.

[0052] Furthermore, the server 30 or the user terminal 20 may determine an avatar for the user in a specific service based on the facial image included in the first biometric information. This allows, for example, a person in charge of dealing with the user in the metaverse to roughly grasp the user's face. Therefore, when the user visits a branch or other store at a later date, it is possible to identify the user.

[0053] In this case, the server 30 may display, in the virtual space of a specific service, information indicating that the user's avatar has been determined based on the facial image included in the first biometric information, in association with the user's avatar.

[0054] 7, face 711A of user avatar 711 is generated by AI or the like based on a facial image recorded on the IC chip of the personal identification number card. Also, in the example of Fig. 7, a display object 714 indicating that the user's avatar has been determined based on the facial image included in the first biometric information is displayed in association with face 711A of user avatar 711.

[0055] The server 30 may display information indicating the type (category) of the identity verification medium used to authenticate the user in association with the user's avatar in the virtual space of a specific service. This allows, for example, a person in charge of handling the user in the metaverse to understand whether the user was identified based on an individual number card, driver's license, residence card, passport, etc. In this case, the server 30 may display a display object (e.g., an illustration of an individual number card) indicating the type of identity verification medium used to authenticate the user, as in the display object 714 of FIG. 7 .

[0056] <Modifications> The information processing system 10 may be the user terminal 20 according to the above-described embodiment, the server 30 according to the above-described embodiment, or may be realized by both the user terminal 20 and the server 30.

[0057] Each process of the information processing system 10 may be executed by at least one of the user terminal 20, the server 30, the server 31, and the blockchain system 40. When a process is executed by the blockchain system 40, the process may be executed by a smart contract, which is a program stored in the blockchain system 40.

[0058] The information processing system 10 may be a device contained in a single housing, but the information processing system 10 of the present disclosure is not limited to this. Each unit of the information processing system 10 may be realized by cloud computing configured by one or more computers, for example.

[0059] Such information processing systems 10 are also included in the examples of the "information processing system" of the present disclosure.

[0060] The present disclosure is not limited to the above-described embodiment, and can be modified as appropriate within the scope of the present disclosure.

[0061] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes. (Supplementary Note 1) An information processing system comprising: a generation unit that, when authentication based on first biometric information recorded on a personal identification medium and second biometric information of a user acquired by a sensor of a user terminal is successful, generates specific information based on the information recorded on the personal identification medium; and a control unit that associates the specific information with account information of the user for a specific service and records the specific information in a distributed ledger system. (Supplementary Note 2) The information processing system according to Supplementary Note 1, wherein the personal identification medium is an individual number card containing an individual number, a driver's license indicating permission to drive a mobile object, a residence card indicating permission to reside in Japan, or an IC (Integrated Circuit) chip in a passport. (Supplementary Note 3) The information processing system according to Supplementary Note 1 or 2, wherein the first biometric information includes at least one of a facial image, a finger vein pattern, iris information, and fingerprint information. (Supplementary Note 4) The information processing system according to any one of Supplements 1 to 3, wherein, when authentication based on the first biometric information and the second biometric information is successful, the control unit records at least one of the first biometric information and the second biometric information in the user terminal. (Supplementary Note 5) The information processing system according to any one of Supplements 1 to 4, wherein, when the user authenticated based on the identity verification medium uses the specific service, the control unit authenticates the user based on at least one of the first biometric information and the second biometric information recorded in the user terminal and third biometric information of the user acquired by a sensor of the user terminal. (Supplementary Note 6) The information processing system according to any one of Supplements 1 to 5, wherein the control unit prohibits the user from creating multiple accounts in the specific service based on the specific information recorded in the distributed ledger system. (Supplementary Note 7) The information processing system according to any one of Supplements 1 to 6, wherein the control unit displays information indicating that the user has been authenticated based on the identity verification medium in association with an avatar of the user in a virtual space of the specific service.(Supplementary Note 8) The information processing system according to any one of Supplements 1 to 7, wherein the control unit displays information according to attributes of the distributed ledger system in association with an avatar of the user in a virtual space of the specific service. (Supplementary Note 9) The information processing system according to any one of Supplements 1 to 8, wherein the control unit determines an avatar of the user in the specific service based on a facial image included in the first biometric information. (Supplementary Note 10) The information processing system according to Supplementary Note 9, wherein the control unit displays information indicating that the avatar has been determined based on the facial image included in the first biometric information in association with the avatar in a virtual space of the specific service. (Supplementary Note 11) An information processing method comprising, when authentication based on the first biometric information recorded on a personal identification medium and the user's second biometric information acquired by a sensor of a user terminal is successful, generating specific information based on the information recorded on the personal identification medium, and recording the specific information in a distributed ledger system in association with account information of the user in a specific service. (Supplementary Note 12) A non-transitory computer-readable medium storing a program that causes a computer to execute the following process: if authentication based on first biometric information recorded on a personal identification medium and second biometric information of a user acquired by a sensor on a user terminal is successful, generate specific information based on the information recorded on the personal identification medium, associate the specific information with account information of the user for a specific service, and record the specific information in a distributed ledger system.

[0062] REFERENCE SIGNS LIST 1 Communication system 10 Information processing system 11 Generation unit 12 Control unit 20 User terminal 30 Server 31 Server 40 Blockchain system

Claims

1. a generating unit that generates specific information based on the information recorded on the personal identification medium when authentication based on the first biometric information recorded on the personal identification medium and the second biometric information of the user acquired by a sensor of the user terminal is successful; a control unit that associates the specific information with account information of the user for a specific service and records the specific information in a distributed ledger system; An information processing system having the above.

2. The personal identification medium is an individual number card on which an individual number is written, a driver's license indicating that the person is permitted to drive a vehicle, a residence card indicating that the person is permitted to reside in Japan, or an IC (Integrated Circuit) chip in a passport. The information processing system according to claim 1 .

3. the first biometric information includes at least one of a face image, a finger vein pattern, iris information, and fingerprint information; 3. The information processing system according to claim 1.

4. the control unit, when authentication based on the first biometric information and the second biometric information is successful, causes the user terminal to record at least one of the first biometric information and the second biometric information.

3. The information processing system according to claim 1.

5. When the user authenticated based on the identity verification medium uses the specific service, the control unit authenticates the user based on at least one of the first biometric information and the second biometric information recorded in the user terminal and third biometric information of the user acquired by a sensor of the user terminal.

3. The information processing system according to claim 1.

6. the control unit prohibits the user from creating multiple accounts for the specific service based on the specific information recorded in the distributed ledger system; 3. The information processing system according to claim 1.

7. the control unit displays, in a virtual space in the specific service, information indicating that the user has been authenticated based on the identity verification medium, in association with an avatar of the user.

3. The information processing system according to claim 1.

8. the control unit displays information according to attributes of the distributed ledger system in association with an avatar of the user in a virtual space of the specific service; 3. The information processing system according to claim 1.

9. the control unit determines an avatar of the user for the specific service based on a facial image included in the first biometric information.

3. The information processing system according to claim 1.

10. the control unit causes information indicating that the avatar has been determined based on a facial image included in the first biometric information to be displayed in association with the avatar in the virtual space of the specific service. The information processing system according to claim 9 .

11. If authentication based on the first biometric information recorded on the personal identification medium and the second biometric information of the user acquired by a sensor of the user terminal is successful, generating specific information based on the information recorded on the personal identification medium; Associating the specific information with the user's account information for a specific service and recording the specific information in a distributed ledger system; Information processing methods.

12. If authentication based on the first biometric information recorded on the personal identification medium and the second biometric information of the user acquired by a sensor of the user terminal is successful, generating specific information based on the information recorded on the personal identification medium; Associating the specific information with the user's account information for a specific service and recording the specific information in a distributed ledger system; A program that causes a computer to perform a process.